Preferences

Lots of feel good ideas in the post, but no actual good ideas. Back when Congress created the Do Not Call Registry, and then forced law abiding companies to pay $10,000 for it, they pretty much just compiled an amazing list of active phone numbers that non-law abiding companies could acquire for a pretty good price and then sell them in batches to smaller companies that couldn't afford the full thing.

Once virtual phone services were invented, companies didn't even have to worry about dodging the Feds, they just moved all their operations overseas. Feel good laws will not solve this problem, it's going to take actual technological solutions.


That's bullshit. Telcos can stop it on a dime but they don't because they profit from it. We just need regulation with teeth. Your attitude that only "innovation" can save us and we should get rid of regulators is what led us to where we are now.
Verizon has my cell phone in some kind of trial for a new service that's supposed to filter out robocalls.

They'll want to charge me for it soon, I'm sure. I'm betting that as soon as the trial is up (one that I never asked for, btw) that the number of bogus calls will skyrocket, and I'll be forced to whitelist.

My response will be letters to the FCC [nothing will happen] and the FTC [nothing will happen]. Companies and powerfully-placed individuals make a lot of money from these calls. I don't know how difficult the ESS-level work is for call filtering, but fixing the landscape of corrupt practices is a LOT harder.

Sounds like you've been opted-in to a trial of SHAKEN/STIR[0], which is a new government mandated technology that phone companies have to install to block robocalls this year. I believe it will be free to all because it will be required by the gov.

[0]https://arstechnica.com/tech-policy/2019/02/ajit-pai-orders-...

"I believe it will be free to all because it will be required by the gov."

This is an industry that already sticks in "regulatory compliance" fees. Why would you think they'd make it free when they can charge you for it with no way to opt out of the fee?

Thats right. Innovation lead to this. With more innovation from telcos, we'll get a "Now! from $9.99 a month we'll block all robocalls."
I have a really tough time comprehending why it is such a difficult problem to solve. The FCC could have solved it by now, independently of congressional legislation, considering the fact that they regulate the issuance of phone numbers. Those overseas companies still have to get their US phone numbers from an FCC regulated body.

What am I missing?

My guess is that it's a motivation problem. With email there was a huge motivation for email providers to fix spam. Email providers don't make money based on the quantity of emails sent and it's a well functioning market. The cost of moving your inbox to another provider is pretty low and there are many competitors. Contrast to this problem: telcos make more money if more calls get placed; there aren't many alternatives; barrier of entry to the market is very high; switching provider is painful; you cannot just try a different telco like you could for email.
The massive global installed base of ss7 phone system/pstn equipment nobody wants to pay to replace or upgrade. Most solutions to securing ss7 or authentication of call origin require new custom software extensions built on top of something that is mid 1980s technology.

SS7 is from an era when big phone companies all trusted each other and interconnected without any of the modern crypto or authentication built into a modern network.

Why would the Verizon/AT&T lawyers running the FCC want do things that cost the telcos money?

It's not like these are long-term government employees, they are taking big paycuts in anticipation of getting private sector gigs later.

Two things:

1) Most of the spam calls are spoofing numbers, so it doesn't really matter who issued the numbers.

2) Spam calls could come from overseas numbers instead, I've certainly gotten a few. I'd rather they come from US numbers, so at least when people call back, they're not paying an arm and a leg for the call if they don't realize the number is non-US.

#1 is a key point here, and understanding it is essential to solving this problem once and for all. It's not just caller ID that they're spoofing. PSTN works a bit like the internet: there are "good faith" peering agreements between telephone companies, and they rely on each other to report truthfully where a call is coming from.

However, there are many companies, especially overseas, that either deliberately shirk these duties or simply lack the funds, technology, and infrastructure to authenticate the sources of telephone calls. The result is something akin to IP address spoofing.

Without imposing major infrastructure overhauls on foreign nations, there's little the US government can do to eliminate these problems.

Here in the UK, nowadays almost all robocalls and scam calls are coming from outside the UK. Mostly India as far as I can tell (they've sworn at me in Hindi).
What you are missing is, the people abusing the phone number are typically not the owners. For example you can get a phone number from Twilio for $1/mo, and spam people from it. Just like you can upload a copyrighted song to YouTube, or download an MP3 from your ISP-provided internet. Owning the "platform" puts some responsibility on you, but it's not expected that you can stop ALL bad activity in its tracks.

What can be done though, is monitoring for massive calling patterns at the PSTN level, but big telcos are not interested/incentivized in stopping Robocalls because it generates a lot of $$ when the calls travel over the legacy phone network.

You punish the accountable parties appropriately.

When Twilio gets a $100k fine for abuse of the $1/mo number, they'll govern the behavior of their customer better and probably eliminate 80% of the bad actors in hours. You could also modify the regulation of interstate carriers to make it expensive to spam entire exchanges with junk calls, or even require licensing to utilize the PSTN. (Which allows you to punish licensees for bad behavior.)

These are all solvable problems, big companies respond quickly to sticks and over time to carrots.

I'm currently working on a tool that would force callers to answer a small math problem (similar to a CAPTCHA) before the service would forward the call to you. Effectively robot call screening. https://callshield.io/
Between this and email, I wonder if we need to start over with an opt-in system for contacts. I know that brings in a whole mountain of other problems. But maybe if we slowly adapted to that rather of the mountain of problems with our current blacklist (if that) approach, the outcome will be preferable.
There is a progression:

  - opt-in (just you)
  - referrals (some of your friends)
  - delegation (a business you trust to do screening)
  - reputation (some segment of society you care about)
  - free for all
I doubt you will want either extremes.
This is a perfect example of why government doesn't come up with good solutions and often just makes it worse.

This item has no comments currently.

Keyboard Shortcuts

Story Lists

j
Next story
k
Previous story
Shift+j
Last story
Shift+k
First story
o Enter
Go to story URL
c
Go to comments
u
Go to author

Navigation

Shift+t
Go to top stories
Shift+n
Go to new stories
Shift+b
Go to best stories
Shift+a
Go to Ask HN
Shift+s
Go to Show HN

Miscellaneous

?
Show this modal